XSS vulnerability in the FortiManager via the buffer parameter
An improper neutralization of input vulnerability in FortiManager GUI may allow an authenticated attacker to perform an XSS (Cross Site Scripting) attack via the buffer parameter.
Execute unauthorized code or commands
FortiManager 6.2.1 and below
Upgrade to FortiManager 6.2.2 or above
Fortinet is pleased to thank Patrick Nielsen for reporting this vulnerability under responsible disclosure.